program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x20a02, 0x4)
write(r0, &(0x7f0000000100)='+p', 0x2)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) (fail_nth: 19)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000c00)={0x1c, &(0x7f0000000580)={0x40, 0xe}, 0x0, 0x0})
[ 109.461581][ T4648] Bluetooth: hci0: command tx timeout
[ 110.024360][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 110.175929][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[ 110.177693][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 110.179648][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 110.179655][ T10] usb 5-1: Product: syz
[ 110.179660][ T10] usb 5-1: Manufacturer: syz
[ 110.179664][ T10] usb 5-1: SerialNumber: syz
[ 110.414532][ T10] hackrf 5-1:1.0: usb_control_msg() failed -32 request 0e
[ 110.414542][ T10] hackrf 5-1:1.0: Could not detect board
[ 110.414584][ T10] hackrf 5-1:1.0: probe with driver hackrf failed with error -32
[ 110.817702][ T5324] hackrf 5-1:1.0: Board ID: 00
[ 110.817710][ T5324] hackrf 5-1:1.0: Firmware version:
[ 110.820088][ T5324] FAULT_INJECTION: forcing a failure.
[ 110.820088][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 110.820138][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 110.820151][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 110.820166][ T5324] Call Trace:
[ 110.820171][ T5324]
[ 110.820177][ T5324] dump_stack_lvl+0xe8/0x150
[ 110.820249][ T5324] should_fail_ex+0x410/0x560
[ 110.820310][ T5324] should_failslab+0xa8/0x100
[ 110.820324][ T5324] __kvmalloc_node_noprof+0x176/0x820
[ 110.820342][ T5324] ? v4l2_ctrl_new+0xa5a/0x1820
[ 110.820391][ T5324] ? v4l2_ctrl_new+0xa5a/0x1820
[ 110.820408][ T5324] v4l2_ctrl_new+0xa5a/0x1820
[ 110.820428][ T5324] v4l2_ctrl_new_std+0x24e/0x300
[ 110.820450][ T5324] ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[ 110.820463][ T5324] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 110.820495][ T5324] ? find_ref_lock+0x425/0x480
[ 110.820532][ T5324] handler_new_ref+0x153/0x930
[ 110.820553][ T5324] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10
[ 110.820575][ T5324] v4l2_ctrl_new+0x1395/0x1820
[ 110.820596][ T5324] v4l2_ctrl_new_std+0x24e/0x300
[ 110.820617][ T5324] ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[ 110.820629][ T5324] ? trace_kmalloc+0x2a/0xf0
[ 110.820645][ T5324] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[ 110.820657][ T5324] ? __kvmalloc_node_noprof+0x52f/0x820
[ 110.820679][ T5324] ? media_request_object_init+0x8d/0xf0
[ 110.820694][ T5324] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 110.820709][ T5324] hackrf_probe+0x778/0x1360
[ 110.820738][ T5324] ? __pfx_hackrf_probe+0x10/0x10
[ 110.820753][ T5324] ? _raw_spin_lock_bh+0x10/0x50
[ 110.820772][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 110.820787][ T5324] ? __pm_runtime_set_status+0x994/0xc80
[ 110.820804][ T5324] usb_probe_interface+0x788/0xe50
[ 110.820834][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 110.820849][ T5324] ? sysfs_do_create_link_sd+0xe0/0x110
[ 110.820865][ T5324] ? driver_sysfs_add+0x1fe/0x210
[ 110.820877][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 110.820888][ T5324] really_probe+0x254/0xae0
[ 110.820902][ T5324] __driver_probe_device+0x1e8/0x360
[ 110.820915][ T5324] driver_probe_device+0x4f/0x240
[ 110.820928][ T5324] __device_attach_driver+0x270/0x410
[ 110.820942][ T5324] bus_for_each_drv+0x258/0x2f0
[ 110.820957][ T5324] ? __pfx___device_attach_driver+0x10/0x10
[ 110.820968][ T5324] ? __pfx_bus_for_each_drv+0x10/0x10
[ 110.820984][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 110.821002][ T5324] __device_attach+0x2c4/0x450
[ 110.821015][ T5324] ? __pfx___device_attach+0x10/0x10
[ 110.821031][ T5324] proc_ioctl+0x409/0x660
[ 110.821059][ T5324] proc_ioctl_default+0xc4/0x110
[ 110.821074][ T5324] ? __pfx_proc_ioctl_default+0x10/0x10
[ 110.821095][ T5324] usbdev_ioctl+0x1386/0x2120
[ 110.821112][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 110.821124][ T5324] ? __fget_files+0x2a/0x420
[ 110.821138][ T5324] ? __fget_files+0x3a2/0x420
[ 110.821150][ T5324] ? __fget_files+0x2a/0x420
[ 110.821164][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20
[ 110.821177][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 110.821190][ T5324] __se_sys_ioctl+0xfc/0x170
[ 110.821208][ T5324] do_syscall_64+0x166/0x520
[ 110.821220][ T5324] ? trace_irq_disable+0x3b/0x140
[ 110.821231][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.821242][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 110.821256][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.821267][ T5324] RIP: 0033:0x7fda9979e159
[ 110.821289][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.821298][ T5324] RSP: 002b:00007fda9a721fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 110.821321][ T5324] RAX: ffffffffffffffda RBX: 00007fda99a26090 RCX: 00007fda9979e159
[ 110.821329][ T5324] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005
[ 110.821336][ T5324] RBP: 00007fda9a722050 R08: 0000000000000000 R09: 0000000000000000
[ 110.821342][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 110.821349][ T5324] R13: 00007fda99a26128 R14: 00007fda99a26090 R15: 00007ffe5eb760c8
[ 110.821366][ T5324]
[ 110.821891][ T5324] ------------[ cut here ]------------
[ 110.821899][ T5324] ncontrols == 0 || controls[0] == NULL
[ 110.821905][ T5324] WARNING: drivers/media/v4l2-core/v4l2-ctrls-core.c:2557 at v4l2_ctrl_auto_cluster+0x1c1/0x610, CPU#0: syz.0.0/5324
[ 111.022850][ T5324] Modules linked in:
[ 111.024878][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 111.028699][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.032954][ T5324] RIP: 0010:v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.036633][ T5324] Code: ff c7 e9 e8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 73 ff ff ff 48 89 ef e8 3a 2c 22 fa e9 66 ff ff ff e8 30 85 b0 f9 90 <0f> 0b 90 eb 65 e8 25 85 b0 f9 48 8b 44 24 28 80 3c 18 00 74 08 4c
[ 111.045503][ T5324] RSP: 0018:ffffc9000ed2f7d8 EFLAGS: 00010293
[ 111.048412][ T5324] RAX: ffffffff88175c60 RBX: dffffc0000000000 RCX: ffff888012c0cb00
[ 111.051673][ T5324] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 111.055063][ T5324] RBP: 0000000000000000 R08: ffffffff8ce0a1a0 R09: 0000000000000001
[ 111.058413][ T5324] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000000
[ 111.061754][ T5324] R13: 0000000000000000 R14: ffff888012c11628 R15: 0000000000000002
[ 111.065274][ T5324] FS: 00007fda9a7226c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000
[ 111.069013][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.071701][ T5324] CR2: 00007fda9a6fffa0 CR3: 000000001d10b000 CR4: 0000000000352ef0
[ 111.075137][ T5324] Call Trace:
[ 111.076608][ T5324]
[ 111.077959][ T5324] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 111.080531][ T5324] hackrf_probe+0x80a/0x1360
[ 111.082625][ T5324] ? __pfx_hackrf_probe+0x10/0x10
[ 111.084859][ T5324] ? _raw_spin_lock_bh+0x10/0x50
[ 111.087017][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 111.089597][ T5324] ? __pm_runtime_set_status+0x994/0xc80
[ 111.092085][ T5324] usb_probe_interface+0x788/0xe50
[ 111.094311][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.096815][ T5324] ? sysfs_do_create_link_sd+0xe0/0x110
[ 111.099223][ T5324] ? driver_sysfs_add+0x1fe/0x210
[ 111.101483][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.103929][ T5324] really_probe+0x254/0xae0
[ 111.105926][ T5324] __driver_probe_device+0x1e8/0x360
[ 111.108300][ T5324] driver_probe_device+0x4f/0x240
[ 111.110543][ T5324] __device_attach_driver+0x270/0x410
[ 111.112898][ T5324] bus_for_each_drv+0x258/0x2f0
[ 111.115128][ T5324] ? __pfx___device_attach_driver+0x10/0x10
[ 111.117675][ T5324] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.119918][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 111.122325][ T5324] __device_attach+0x2c4/0x450
[ 111.127632][ T5324] ? __pfx___device_attach+0x10/0x10
[ 111.130031][ T5324] proc_ioctl+0x409/0x660
[ 111.132072][ T5324] proc_ioctl_default+0xc4/0x110
[ 111.134436][ T5324] ? __pfx_proc_ioctl_default+0x10/0x10
[ 111.140218][ T5324] usbdev_ioctl+0x1386/0x2120
[ 111.143340][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 111.145750][ T5324] ? __fget_files+0x2a/0x420
[ 111.147808][ T5324] ? __fget_files+0x3a2/0x420
[ 111.149742][ T5324] ? __fget_files+0x2a/0x420
[ 111.151687][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20
[ 111.153919][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 111.156215][ T5324] __se_sys_ioctl+0xfc/0x170
[ 111.158277][ T5324] do_syscall_64+0x166/0x520
[ 111.160297][ T5324] ? trace_irq_disable+0x3b/0x140
[ 111.162573][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.165416][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 111.168366][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.171059][ T5324] RIP: 0033:0x7fda9979e159
[ 111.173082][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.181489][ T5324] RSP: 002b:00007fda9a721fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 111.185323][ T5324] RAX: ffffffffffffffda RBX: 00007fda99a26090 RCX: 00007fda9979e159
[ 111.188799][ T5324] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005
[ 111.192195][ T5324] RBP: 00007fda9a722050 R08: 0000000000000000 R09: 0000000000000000
[ 111.196698][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 111.200170][ T5324] R13: 00007fda99a26128 R14: 00007fda99a26090 R15: 00007ffe5eb760c8
[ 111.203594][ T5324]
[ 111.205152][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 111.208336][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 111.212125][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.216313][ T5324] Call Trace:
[ 111.217808][ T5324]
[ 111.219065][ T5324] vpanic+0x56d/0xa60
[ 111.220769][ T5324] ? __pfx__printk+0x10/0x10
[ 111.222756][ T5324] ? __pfx_vpanic+0x10/0x10
[ 111.224755][ T5324] ? is_bpf_text_address+0x292/0x2b0
[ 111.227146][ T5324] ? is_bpf_text_address+0x26/0x2b0
[ 111.229413][ T5324] panic+0xc5/0xd0
[ 111.231163][ T5324] ? __pfx_panic+0x10/0x10
[ 111.233081][ T5324] __warn+0x315/0x4c0
[ 111.234813][ T5324] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.237281][ T5324] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.239731][ T5324] __report_bug+0x276/0x570
[ 111.241590][ T5324] ? kfree+0x1c5/0x650
[ 111.243234][ T5324] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.245427][ T5324] ? __pfx___report_bug+0x10/0x10
[ 111.247714][ T5324] ? v4l2_ctrl_new_std+0x24e/0x300
[ 111.250028][ T5324] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.252435][ T5324] report_bug+0x16b/0x220
[ 111.254254][ T5324] ? v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.256731][ T5324] ? v4l2_ctrl_auto_cluster+0x1c3/0x610
[ 111.259036][ T5324] handle_bug+0x9c/0x200
[ 111.260910][ T5324] exc_invalid_op+0x1a/0x50
[ 111.262874][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 111.265010][ T5324] RIP: 0010:v4l2_ctrl_auto_cluster+0x1c1/0x610
[ 111.267748][ T5324] Code: ff c7 e9 e8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 73 ff ff ff 48 89 ef e8 3a 2c 22 fa e9 66 ff ff ff e8 30 85 b0 f9 90 <0f> 0b 90 eb 65 e8 25 85 b0 f9 48 8b 44 24 28 80 3c 18 00 74 08 4c
[ 111.276101][ T5324] RSP: 0018:ffffc9000ed2f7d8 EFLAGS: 00010293
[ 111.278773][ T5324] RAX: ffffffff88175c60 RBX: dffffc0000000000 RCX: ffff888012c0cb00
[ 111.282184][ T5324] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 111.285585][ T5324] RBP: 0000000000000000 R08: ffffffff8ce0a1a0 R09: 0000000000000001
[ 111.289038][ T5324] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000000
[ 111.292433][ T5324] R13: 0000000000000000 R14: ffff888012c11628 R15: 0000000000000002
[ 111.295700][ T5324] ? v4l2_ctrl_auto_cluster+0x1c0/0x610
[ 111.298173][ T5324] ? v4l2_ctrl_auto_cluster+0x1c0/0x610
[ 111.301846][ T5324] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[ 111.304697][ T5324] hackrf_probe+0x80a/0x1360
[ 111.306515][ T5324] ? __pfx_hackrf_probe+0x10/0x10
[ 111.308638][ T5324] ? _raw_spin_lock_bh+0x10/0x50
[ 111.310774][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 111.313278][ T5324] ? __pm_runtime_set_status+0x994/0xc80
[ 111.315769][ T5324] usb_probe_interface+0x788/0xe50
[ 111.318152][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.320596][ T5324] ? sysfs_do_create_link_sd+0xe0/0x110
[ 111.322805][ T5324] ? driver_sysfs_add+0x1fe/0x210
[ 111.324810][ T5324] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.327075][ T5324] really_probe+0x254/0xae0
[ 111.328840][ T5324] __driver_probe_device+0x1e8/0x360
[ 111.330947][ T5324] driver_probe_device+0x4f/0x240
[ 111.332971][ T5324] __device_attach_driver+0x270/0x410
[ 111.335337][ T5324] bus_for_each_drv+0x258/0x2f0
[ 111.337424][ T5324] ? __pfx___device_attach_driver+0x10/0x10
[ 111.340051][ T5324] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.342412][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 111.344940][ T5324] __device_attach+0x2c4/0x450
[ 111.347078][ T5324] ? __pfx___device_attach+0x10/0x10
[ 111.349381][ T5324] proc_ioctl+0x409/0x660
[ 111.351276][ T5324] proc_ioctl_default+0xc4/0x110
[ 111.353437][ T5324] ? __pfx_proc_ioctl_default+0x10/0x10
[ 111.355745][ T5324] usbdev_ioctl+0x1386/0x2120
[ 111.357709][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 111.359852][ T5324] ? __fget_files+0x2a/0x420
[ 111.361815][ T5324] ? __fget_files+0x3a2/0x420
[ 111.363855][ T5324] ? __fget_files+0x2a/0x420
[ 111.365832][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20
[ 111.368017][ T5324] ? __pfx_usbdev_ioctl+0x10/0x10
[ 111.370157][ T5324] __se_sys_ioctl+0xfc/0x170
[ 111.372193][ T5324] do_syscall_64+0x166/0x520
[ 111.374192][ T5324] ? trace_irq_disable+0x3b/0x140
[ 111.376399][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.378976][ T5324] ? clear_bhb_loop+0x70/0xc0
[ 111.380975][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.383436][ T5324] RIP: 0033:0x7fda9979e159
[ 111.385403][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.393385][ T5324] RSP: 002b:00007fda9a721fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 111.397108][ T5324] RAX: ffffffffffffffda RBX: 00007fda99a26090 RCX: 00007fda9979e159
[ 111.400503][ T5324] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005
[ 111.403847][ T5324] RBP: 00007fda9a722050 R08: 0000000000000000 R09: 0000000000000000
[ 111.407298][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 111.410684][ T5324] R13: 00007fda99a26128 R14: 00007fda99a26090 R15: 00007ffe5eb760c8
[ 111.414271][ T5324]
[ 111.416204][ T5324] Kernel Offset: disabled
[ 111.418259][ T5324] Rebooting in 86400 seconds..